Virtual Machines

From Sea of Fate
Revision as of 06:38, 28 February 2025 by Nigel (talk | contribs) (Created page with "==Introduction== There will be a variety of Virtual Machines contained within the Home Lab. A Brief description will be provided here with a more complete set of notes on each individual VM on the links. ==Virtual Machines== A fairly high description of each of the VMs in use in the Home Lab. ===Pfsense=== The firewall and gateway to the whole of the Home Lab. The Virgin router will forward all incoming traffic from the Internet to the WAN port of th...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

Introduction

There will be a variety of Virtual Machines contained within the Home Lab. A Brief description will be provided here with a more complete set of notes on each individual VM on the links.

Virtual Machines

A fairly high description of each of the VMs in use in the Home Lab.

Pfsense

The firewall and gateway to the whole of the Home Lab. The Virgin router will forward all incoming traffic from the Internet to the WAN port of the firewall at 192.168.0.125. The Firewall has five other internal interfaces to link to the Home Lab environment. 192.168.99.10/24 is the MGT VLAN it should be severely restricted to maintain security it is the only VLAN to be able to access the WebGUI of Pfsense. The Production VLAN is where all of the file and web servers are, the gateway address is 192.168.100.1/24. The Infra VLAN gateway 192.168.110.10/24 is where any supporting services will be located, at present there is only a Nameserver. I have reserved a VLAN called VPNnet with a gateway address of 192.168.130.1/24 for a VPN server to provide a VPN tunnel from remote terminals, there will not be many concurrent connections so a /24 network will be more than sufficient. The last VLAN has a Pfsense interface of 192.168.111.1/24 for any Desktop VM terminals that I will use while i am out, I have called this terminals. Further details of the Pfsense firewall can be found here.

Management kiosk

A desktop Linux used to configure other VMs including Pfsense. As it is so sensitive i have kept it isolated on the MGT VLAN. There I have setup passwordless ssh to various other VMs as well. The host is called Lemon and has an IP Address of 192.168.99.20/24.

CA Server

I have setup a host specifically to issue SSL certificates. The host name is Alpine with an IP of 192.168.99.25/24.

Nameserver

There is only one nameserver at the moment called ns1 192.168.110.11/24. It is the only host on the Infra VLAN.


VPNserver

There will be a VPN server called vanilla at 192.168.130.5/24. It will control VPN access to the rest of the network.


Remote Access Terminal

There will be two VMs setup on teminals VLAN (192.168.111.0/24 with a desktop that I will provide for remote access one of them will be Linux (Ubuntu), hostname Lychee and the other will be Windows 11 Pro with a hostname Wahoo.

==